The file EPROA17700.EXE is identified as a virus dropper.
The dropper EPROA17700.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file EPROA17700.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the EPROA17700.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the EPROA17700.EXE process and delete the file EPROA17700.EXE.
Malware Analysis of EPROA17700.EXE
Full path on a computer: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe
Detected by UnHackMe:
EPROA17700.EXE
Default location: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe
Removal Results: Success
Number of reboot: 1
EPROA17700.EXE is known as:
Trojan.Ircbrute, ObfuscatedAAU.hb.6D88E9337BC5, Worm.Autorun, Trojan.Injector.aejx, Trojan ( 0040f5791 ), Trojan.Gurl.brorzr, W32.Trojan2.NWBR, Ircbrute.GX, Win32.Lethic.THCJaN, Trojan.Injector.XWZZ9oRWCPQ, Worm.Net-Kolab.68231, Troj.Agent-AAXV, TrojWare.Injector.BGJ, BackDoor.Gurl.2, Trojan.Agent.aaxv (v), Backdoor.Azbreg.bqi, Troj.Undef.(kcloud), Trojan.Lethic.B, Trojan.Agent.Gen-Undef, Trojan.HmBlocker, W32.Trojan.WLUI-7811, BScope.Backdoor.IRCBot.2122, Trj.Zbot.M, Win32.Injector.AEJX, Trojan.Ircbrute, W32.Injector.AEJX.tr
EPROA17700.EXE hash:
- MD5: 6d88e9337bc59df3c72a2a227db4d6ec
Registry:- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\eproa17700: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe”
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: “explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe”
Folders:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311
Files:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\Desktop.ini
- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-18751311\eproa17700.exe